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REMARKS 

Claims 1, 6 - 7, 9 - 1 1, 13, 18 - 19, 21 - 23, 25, 30, 32, 34 - 36, 39, 44, and 47 have been 
amended herein. Gaims 31 and 45 have been cancelled herein, and Claims 48 - 52 have been 
added. No new matter has been introduced with these amendtnents or added claims, all of which 
are supported in the spedfication as originally filed. Claims 1 - 2, 6 - 7, 9 - 14, 18 - 19, 21 - 26, 
30, 32, 34 - 37, 39 - 40, 44, and 47 52 are now in the ^licatioti. 

JL Rejection under 35 U.S.C. §112, s g^-^nH psttuptajsh 

Page 6, lines 19 - 21 of the Office Action dated Augqrt 10, 2005 (hereinafter, Office 
Action") state that Claims 1-2, 6 -7, 9- 14, 18-19,21 -26, 30 - 32, 34--37, 39^40,44*45, 
and 47 are rejected under 35 U.S.C. §1 12, second paragraph, as being indefinite for failing to 
particularly pcUtA out and distinctly claim the sid^ject matter which Applicant regards as his 
invention. Appropriate amendments have been made herein, and the Examiner is respectfiilty 
requested to withdraw the § 1 12 rejection. 

n. Mg?tiqn.und<3r?5 y.$,C §102(1?) 

Page 7, lines 22 - 24 of the Office Action state that Claims 13 - 14, 18 - 19, 21 - 22, 24 - 
26, 30 - 32, 34 - 35, 37, 39 - 40, 44 - 45, and 47 are rejected under 35 U,S,C. §102(b) as being 
anticipated by Patel et ai ("An Effident Kscrete Log Pseudo Random Generator^'). Claims 3 1 
and 45 have been cancelled from the application without prejudice, recdericg the t^ection moot 
as to those claims. This rejection is respectfiilty trav^sed with regard to the remaining ones of 
these daims. 
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Applicant's independent Claims 1, 13, 25, and 39 c!)q)]idtiy specify "an input value 
comprising random bits^ (Claim 13, line 3, emphasis added)» wbidi is provided "as a short 
jssponent x of a 1-way function G**x mod (Qaim 13, lines 4-5, emphasis added). This 1- 
way function **gcttcrat[cs] an output sequence comprising N pseudo-random bits" (Claim 13, 
lines 4 - 5). The N bits are "separat[ed] ... into a C-bit portion and an (N-C)-bit portion" (Claim 
13, lines 9 - 10). The C-bit portion is used '*as the provided input vahae for [i.e., as an ejqxmera 
0^ see Claim 13, line 5] a ne?ct iteration of [the function]" (Claim 13, lines 1 1 - 12) and the (M- 
C>bit portion is used "as pseudo-random output bits" (Claim 13» lines 12 - 14). 

With rtferaice to independent Claim 13, pages 8-9 of Office Action provide a number 
of dtations of Section 5 of Patd. However, the "NEW GENERATOR" described in PatePs 
Section 5 (see p. 3 13, last paragraph) describes use of an N-bit exponent, as has been discussed 
in detail in Applicant's prior re^onse transmitted on June 6, 2005 (hereinafter, ^^Applicant's 
prior response), which is hereby incorporated herdn by reference. PateFs use of an N-htt 
exponent (which is a long exponent) is patentaWy distinct from Applicant's claimed use of a 
short. C-hit exponent. 

Furthermore, Applicant respectful)^ submits that while Patel discusses produciflqjs "n - c** 
bits per iteration of his generator, there is no teaching in Patd that any ""c*" of those bits are used 
as the exponent in a ncKt^sequenlial iteration of the generator, in contrast to AppQcant^s daimed 
invention. 
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The Office Action provides a inimber of citations to Section 5.1 of Patd, and refers to 
Paters discussions of a "short exponent". AppUcant respectfully notes that Patel's discussions of 
"s", which is of size wQog «) bits, does nat pertain to Patel's generator but rather pertains to his 
p ^ofqfaecutitv of that generator. See Section 5.1, "'Proof of Security", on p. 314 of Patet. 
AppBcant respectfuUy submits that the letter ''s'', as used by Patel, is a shorthand signal which 
indicates that Patd is discussing ''security" of his gmerator. 

Patel's Section 5. 1 discusses how to prove that Patel's generator is secure - that is. 
whether the pseHdo- random hits look random. If pseudo-iaiutom bits generated by a genttator 
am »«.:rii^prishflhle from truly random bits, then the generator is sot secure. In the gflieral case, a 
proof of security presents a problem, sudhi as foctoring large numbers or discrete logarithm with 
short eiqponents^ and presumes that this problem is hard to solve. An algorithm (such as a 
pswdo-iandom generator) based on th^ hard*to-solve problem is secure if the problem panpfit be 
solved (or is computationatty iofeasiWe to solve). By contrast, if the problem cm be solved, then 
the algorithm is not secure. 

In Patd's paper, the pn^lem addressed in Section 5. 1 is to sohre Y = G**S where S is a 
C-bit number. That is, gh^ a value Y and a generator O used to compute that vahie Y, the 
problem is to find S. If S can be found, then the fiinction is QSt a I'W^ function and is QSi 
secure. (As will be obvious, if S is a faM N-bit number, in contrast to Patel's teaching of using a 
C-bit number in the proof of security, then solvmg for an N-bit S is even more difBcult tiJan 
sohrnig ft>r a C-bit vahie of S. Thus, Patd must expUddy make the assumption about udng 
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diorter ejcpooents, for bis proof of security.) 

Section 5.1 thus shows how a procedure that dUtioguishes the bits generated by Patel's 
aleorithm from truly random bits (i.e., that demonstrates that the bits are net pseudo-random) £afi 
m the vahie of S, when giveo the value Y that was generated when using S as an exponent. 
And as noted above, this forther estabUshes that the function Y is nfit a 1-way fimction and is net 
secure. See the second paragraph of Section 5.1. "Now we note that we ^ use this to {MSPQV^^ 
oiveng'modp [i.e., g**s mod p] where* has (oOog ») bits". That is> Patel teaches that if* is 
restricted to o^log n) bits, then the vahie of S ^ be discovered. 

This is in contfast to Applicant's daimed inventiOT, which specifies that N gsQiisi 
random bits are generated ^»hesfk usiiiy a short C-bit exponent (Claim 13. lines 4-5). In other 
woitls^ Applicant's independent claims specafy a secure. 1-way fimction. 

Applicant's independent claims fiirther specify that an (N-C)-bit portion of the generated 
N-bit pseudo-nudran output sequence are used **as pseudo-random output Wts" (Claim 13, lines 
12 - 14). Patd similarly discusses outputting "w - <0(log «) bits'*. See p. 3 13. final sentence 
discussing "NEW GENERATOR", and Section 7. 1, final sentence of first paragraph fThe 
output of the generator are the trailing n - <.)(Iog n) bits of ..r). However, whfle Applicant's 
daims spedfy using, "as the provided iiq>ttt value [i.e., as a short exponent; see Claim 13, line 5] 
for a next iteiation of the [genefatorF (Claim 13, lines 11 - 12X a C^lntPPrtjon of the N bits that 
were generated, Patel's NEW GENERATOR uses it - w(log «) bits as output but teaches usmg 
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alOJofthe bits as the exponent. ReferagaintoAppfiiant's prior response, where this N-bit 
exponent was discussed in detail, 

AppHcant notes tliai Patel begins the analjfsis of bis generator in Section 7.1 by stating 
"Let us focus on the mechamcs of the geoenitoi^ (emphasis added). In other words, Section 7. 1 
is the discussion of bow Patel's generator woiks. in contrast to Section 5. 1 . The remaining 
sentences of the first paragraph of Section 7. 1 discuss the permissible values of the generator G, 
the secret seed, the ejqiression of the generator function, and the generator output, respectivdy. 

AppBcant further notes that the second paragraph of Section 7. 1 be^ by expUdtly 
stating "... each ftcttdon irn^^lves a larae atoonent ..." (emphasU added). Again, this is in 
contrast to Applicant's claimed use of a short exponent. 

Patd then states, in the second and tirird sentences of Section 7.1, that a short exponent 
could be used for a generator, but m the fourth sentence, notes thai 'This raises some interesting 
questions", and questions identified as "Question 10" and "Question 11" are then presented. In 
other words* Patd admits that he does pot know whether a generator thus constructed would 
woric. In particular, Patel states (following Question 10) that "... when we restrict our exponents 
(to short, C-bit exponents] we no longer have a praxnutation Hence the simple construction [i.e., 
using C-bit exponents] used here is ina pplicable ." (emphasis added). In other words, Patel 
^dftiita that he does not know how to make the generator work if only C bits are used. 
AcoordmgJy, AppKcant respectfully submits that Patel's text is n.Qt enafalinH. If a reference is not 
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enabluiy. then it does not qualify as prior art for a § 102 rgectkm. See In re Sun, 3 1 USPQ 2d 
1451, 1453 (Fed. Cir. 1993) (uttpublished), which stated 

But to be prior art under section 102(bX a reftienoe mugt be eqyh^Jj^ 

it must put the clmmed invention in the hand of one skilled in the art. 

(emphasis added). See also Akzp N, V. ^ United States IntematioMl Trade Comndssion, 1 

USPQ 2d 1241, 1245 (Fed. Cir. 1986), cert, denied, 482 U.S. 909 (1987), which Stated 

Under 35 U.S.C. §102, anticipation requires that each and every dement of the 

claimed invraitton be disclosed in the prior art In addition, the prior art 

Inference must be enabling, thus placii^ the allegedly disclosed matter in the 
possession oi the public. 

(emphasis added). Because Patel's discuswm of usitig a short exponent with a generator is ikA 
^Min^ and therefore cannot be used as prior art under §102, AppUcant respectfiiUy submits 
that Patel cannot be used to antidlpate Ins daimed mveation. 

Further iMerences between Patd and AppUcant's daimed invention will be disais^ 
In Section 7. 1, after discussing probletns wtth his approach, Patd goes on to (following 
Questiott 10) that "A possible method of settling this problem [i.e., the problems that r^t if 
u^ng only C bits for exponents] ..." is to use a "pafea extender^, where "pgeudorraydflffl 
generation [i.e., generation <rf pseudo-random bits] is achieved through repeated applications of 
the extender to a random seed". Applicant's claimed invention, by contrast, does ngt require 
application(s) of a perfect extender. Instead, Applicant's independent claims eocpliatfy specify 
"usir^ the C-b«t portion of the generated N-bit output seouencef ' (Claim 13, lines 11-12, 
emi^a»3 added). In other words^ in Applicant's clalnned invention, the bits are "oT (i.e., taken 
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diiecdv from) the generated output sequence. Because the bits are taken from the generated 
ou^ sequence, this necessarily implies that the bits in ^Ucant's ckamed approach are sQt 
modified using a perfect extender (or any other type of modifying fimction) in betweo) iterations. 

In addition, Patel's proof of secutitv specifies that the short exponrait is selected from the 
l^dmg bits of a prior iteration, while AppHcant's independent claims specify no such restriction. 

In yievt of the above, /Applicant reqiectfijlly submits that h» independent Claims 1, 13, 
25, and 39 are pateotaWe over the teachings of Patcl. Depeident Claims 13 - 14, 18 - 19, 21 - 22, 
24 - 26, 30, 32, 34 - 35, 37, 39 - 40, 44, and 47 are therefore deemed patentaWe over the 
refeenceaswdl. TTie Examine is tterefibre respectfully requested to withdraw the §102 

rejection. 

m. Rejection Unde r 35 U.S.C. Sl03(a) 

Page n, Unes 14 - 16 of the Office Action state that Claims 1 - 2. 6 - 7, 9 - 12, 23. and 36 
are rejected under 35 US.C. §103(a) as being ui^ateotable over Patel in view of Schnwer 
("Applied Cryptography"). This rejection is respectfiiliy traversed. 

Applicant's independent Claims 1, 13, 25, and 39 have been discussed above, and as has 
been demonstrated, Patrf does not anticipate these indepoadent claims. Accordingly, Patel 
cannot be combined with Schnder (assuming, arguendo, diat such combmatian could be made, 
and that one of ski]] in the ait would be motivated to aittempt it) to render dependent Claims 2, 6 ^ 
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7, 9 - 12, 23, and 36 unpatentable. The Examiner is therefore respectfully requested to withdraw 
the §103 rejection. 

IV, Conclusion 

Applicant respect&Uy requests reconsideration of the pending rqected claims, 
withdrawal of all presently outstanding rejections, and allowance of all remaining claims at an 
eariy date. 



Respectfiilly submitted. 




Attorney for Applicant 
Reg. No. 40,999 
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